dani-garcia / vaultwarden

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs
GNU Affero General Public License v3.0
37.44k stars 1.82k forks source link

Organisation user are disappearing #4874

Closed spiritblue01 closed 1 month ago

spiritblue01 commented 1 month ago

Subject of the issue

After the update to latest version 1.32 users of an organization are disappearing. I can invite a member and assign in to a collections. The user is showing up in the member list and he gets an invitation. After he is accepting the user just disappear in the list.

I can invite him again now it's showing the name, not only the email like in the first invite. But if he is accepting, he disappears again.

Deployment environment

Version 1.32. Web Version 2024.6.2

Synology DS718+ with Docker

I changed also the KDF iterations to 600.000 because there was a warning

BlackDex commented 1 month ago

Please provide screenshots, logs, the /admin/diagnostics Support String, and a step-by-step on how to reproduce this specific issue.

spiritblue01 commented 1 month ago

Sure:

Your environment (Generated via diagnostics page)

Config (Generated via diagnostics page)

Show Running Config **Environment settings which are overridden:** ```json { "_duo_akey": null, "_enable_duo": false, "_enable_email_2fa": true, "_enable_smtp": true, "_enable_yubico": true, "_icon_service_csp": "", "_icon_service_url": "", "_ip_header_enabled": true, "_max_note_size": 10000, "_smtp_img_src": "cid:", "admin_ratelimit_max_burst": 3, "admin_ratelimit_seconds": 300, "admin_session_lifetime": 20, "admin_token": "***", "allowed_iframe_ancestors": "", "attachments_folder": "data/attachments", "auth_request_purge_schedule": "30 * * * * *", "authenticator_disable_time_drift": false, "data_folder": "data", "database_conn_init": "", "database_max_conns": 10, "database_timeout": 30, "database_url": "***************", "db_connection_retries": 15, "disable_2fa_remember": false, "disable_admin_token": false, "disable_icon_download": false, "domain": "*****://************************", "domain_origin": "*****://************************", "domain_path": "", "domain_set": true, "duo_context_purge_schedule": "30 * * * * *", "duo_host": null, "duo_ikey": null, "duo_skey": null, "duo_use_iframe": false, "email_2fa_auto_fallback": false, "email_2fa_enforce_on_verified_invite": false, "email_attempts_limit": 3, "email_change_allowed": true, "email_expiration_time": 600, "email_token_size": 6, "emergency_access_allowed": true, "emergency_notification_reminder_schedule": "0 3 * * * *", "emergency_request_timeout_schedule": "0 7 * * * *", "enable_db_wal": true, "enable_websocket": true, "event_cleanup_schedule": "0 10 0 * * *", "events_days_retain": null, "experimental_client_feature_flags": "fido2-vault-credentials", "extended_logging": true, "helo_name": null, "hibp_api_key": null, "http_request_block_non_global_ips": true, "http_request_block_regex": null, "icon_blacklist_non_global_ips": true, "icon_blacklist_regex": null, "icon_cache_folder": "data/icon_cache", "icon_cache_negttl": 259200, "icon_cache_ttl": 2592000, "icon_download_timeout": 10, "icon_redirect_code": 302, "icon_service": "internal", "incomplete_2fa_schedule": "30 * * * * *", "incomplete_2fa_time_limit": 3, "increase_note_size_limit": false, "invitation_expiration_hours": 120, "invitation_org_name": "Vaultwarden", "invitations_allowed": true, "ip_header": "X-Real-IP", "job_poll_interval_ms": 30000, "log_file": null, "log_level": "info", "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f", "login_ratelimit_max_burst": 10, "login_ratelimit_seconds": 60, "org_attachment_limit": null, "org_creation_users": "", "org_events_enabled": false, "org_groups_enabled": false, "password_hints_allowed": true, "password_iterations": 100000, "push_enabled": false, "push_identity_uri": "https://identity.bitwarden.com", "push_installation_id": "***", "push_installation_key": "***", "push_relay_uri": "https://push.bitwarden.com", "reload_templates": false, "require_device_email": false, "rsa_key_filename": "data/rsa_key", "send_purge_schedule": "0 5 * * * *", "sendmail_command": null, "sends_allowed": true, "sends_folder": "data/sends", "show_password_hint": true, "signups_allowed": true, "signups_domains_whitelist": "", "signups_verify": false, "signups_verify_resend_limit": 6, "signups_verify_resend_time": 3600, "smtp_accept_invalid_certs": false, "smtp_accept_invalid_hostnames": false, "smtp_auth_mechanism": "Plain", "smtp_debug": false, "smtp_embed_images": true, "smtp_explicit_tls": null, "smtp_from": "**********************", "smtp_from_name": "Vaultwarden", "smtp_host": "**************", "smtp_password": "***", "smtp_port": 587, "smtp_security": "starttls", "smtp_ssl": null, "smtp_timeout": 15, "smtp_username": "**********************", "templates_folder": "data/templates", "tmp_folder": "data/tmp", "trash_auto_delete_days": null, "trash_purge_schedule": "0 5 0 * * *", "use_sendmail": false, "use_syslog": false, "user_attachment_limit": null, "user_send_limit": null, "web_vault_enabled": true, "web_vault_folder": "web-vault/", "yubico_client_id": null, "yubico_secret_key": null, "yubico_server": null } ```

Invite Member to organization -> Member gets invite -> Member register -> Member disappeared in the Organization:

I see him in the admin panel: Screenshot 2024-08-20 at 11-11-31

But is is not showing up also he has no assignment to the organization.

Screenshot 2024-08-20 at 11-16-10

This issue is happening to all new user.

What kind of logs do u need?

stefan0xC commented 1 month ago

@spiritblue01 The vaultwarden server logs (ideally from the time the user registered and logged in).

Does the user appear in the Revoked tab?

spiritblue01 commented 1 month ago

no it does not appear in the revoked tab.

BlackDex commented 1 month ago

If the user in the /admin overview show that it is part of an org, it probably is part of that org.

Also, what happens if you do not search via the search bar at the top-right but just look for that user by hand, or use the browser search, and check all Members tabs, so, All, Invited, Revoked.

spiritblue01 commented 1 month ago

If the user in the /admin overview show that it is part of an org, it probably is part of that org.

Also, what happens if you do not search via the search bar at the top-right but just look for that user by hand, or use the browser search, and check all Members tabs, so, All, Invited, Revoked.

That is exactly the issue after accepting the invite it is not showing that the user is part of the org it is just blank like in my screenshot. But the user was part of the org once I invited.

BlackDex commented 1 month ago

Then provide the logs during the moments of

And if possible, screenshots of the user being in the invite list.

The only thing i can think of is a org policy which removes the user because of policy validations.

spiritblue01 commented 1 month ago

issue not happened again